CVE-2026-6068
nasm: NASM: Heap use after free vulnerability in response file processing
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · April 10, 2026
Updated · June 28, 2026
Description
A flaw was found in NASM, a Netwide Assembler. This vulnerability, known as a heap use after free, occurs when the program attempts to use memory that has already been released. During response file processing, a pointer to freed memory is retained and later accessed. This can lead to data corruption or unexpected program behavior.
Statement
This Moderate impact vulnerability in NASM affects Red Hat Enterprise Linux and Fedora. A heap use after free flaw occurs during response file processing, which could lead to data corruption or unexpected program behavior when a specially crafted response file is processed. Exploitation requires the processing of a malicious response file.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 6.8CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:H
CWE-825 · Expired Pointer Dereference